docs: close consumer alpha readiness gaps #1
consumer-alpha-canary.yml
on: push
baseline
/
...
/
Dependency Scan
baseline
/
...
/
GitHub Actions Security
baseline
/
...
/
Trivy IaC Scan
baseline
/
...
/
Secretless Gitleaks Scan
baseline
/
...
/
Semgrep SAST
baseline
/
Profile Conclusion
Annotations
1 error
|
Invalid workflow file:
.github/workflows/consumer-alpha-canary.yml#L40
The workflow is not valid. filecoin-project/ff-sec-actions/.github/workflows/ecosystem-baseline.yml@24d5c70f87a771b3d3432efd12316f4e29251465 (Line: 40, Col: 3): Error calling workflow 'filecoin-project/ff-sec-actions/.github/workflows/sec-dependencies.yml@5b2da0e0fda3e9268b69a35451ca016f1b4d24ba'. The nested job 'publish-sarif' is requesting 'security-events: write', but is only allowed 'security-events: none'.
|